Rubicon: Bounded verification of web applications

Proceedings of the ACM SIGSOFT 20th International Symposium on the Foundations of Software Engineering, FSE 2012

Volumn , Issue , 2012, Pages

  Near, Joseph P ^a   Jackson, Daniel ^a  

^a MASSACHUSETTS INSTITUTE OF TECHNOLOGY   (United States)

Author keywords

Alloy analyzer; Alloy language; lightweight formal methods; programming languages; RSpec; Ruby on rails; symbolic execution; web applications

Indexed keywords

ALLOY ANALYZERS; LIGHTWEIGHT FORMAL METHODS; RSPEC; RUBY ON RAILS; SYMBOLIC EXECUTION; WEB APPLICATION;

ALLOYS; COMPUTER PROGRAMMING LANGUAGES; PROBLEM ORIENTED LANGUAGES; RUBY; SOFTWARE ENGINEERING; WORLD WIDE WEB;

CERIUM ALLOYS;

EID: 84871343569     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/2393596.2393667     Document Type: Conference Paper

References (24)

1. L. Alfaro. Model checking the world wide web. In Proceedings of the 13th International Conference on Computer Aided Verification, pages 337-349. Springer-Verlag, 2001.
2. A.A. Andrews, J. Offutt, and R.T. Alexander. Testing web applications by modeling with fsms. Software and Systems Modeling, 4(3):326-345, 2005.
3. M. Benedikt, J. Freire, and P. Godefroid. Veriweb: Automatically testing dynamic web sites. In In Proceedings of 11th International World Wide Web Conference (WWW'2002). Citeseer, 2002.
4. B. Bordbar and K. Anastasakis. Mda and analysis of web applications. Trends in Enterprise Application Architecture, pages 44-55, 2006.
5. D. Castelluccia, M. Mongiello, M. Ruta, and R. Totaro. Waver: A model checking-based tool to verify web application design. Electronic Notes in Theoretical Computer Science, 157(1):61-76, 2006.
6. A. Chaudhuri and J.S. Foster. Symbolic security analysis of ruby-on-rails web applications. In Proceedings of the 17th ACM conference on Computer and communications security, pages 585-594. ACM, 2010.
7. D. Chelimsky, D. Astels, Z. Dennis, A. Hellesoy, B. Helmkamp, and D. North. The rspec book: Behaviour driven development with rspec, cucumber, and friends. Pragmatic Bookshelf, 2010.
8. J. Chen and X. Zhao. Formal models for web navigations with session control and browser cache. Formal Methods and Software Engineering, pages 46-60, 2004.
9. A. Chlipala and LLC Impredicative. Static checking of dynamically-varying security policies in database-backed applications. In Proceedings of the 9th USENIX conference on Operating systems design and implementation, page 1. USENIX Association, 2010.
10. K. Claessen and J. Hughes. QuickCheck: a lightweight tool for random testing of Haskell programs. Acm sigplan notices, 35(9):268-279, 2000.
11. P. Cousot and R. Cousot. Abstract interpretation: a unified lattice model for static analysis of programs by construction or approximation of fixpoints. In Proceedings of the 4th ACM SIGACT-SIGPLAN symposium on Principles of programming languages, pages 238-252. ACM, 1977.
12. L. De Alfaro, T.A. Henzinger, and F.Y.C. Mang. Mcweb: A model-checking tool for web site debugging. In Poster presented at WWW, volume 10. Citeseer, 2001.
13. M. Haydar, A. Petrenko, and H. Sahraoui. Formal verification of web applications modeled by communicating automata. Formal Techniques for Networked and Distributed Systems-FORTE 2004, pages 115-132, 2004.
14. D. Jackson. Software Abstractions: logic, language, and analysis. The MIT Press, 2006.
15. S. Khurshid, C. Pǎsǎreanu, and W. Visser. Generalized symbolic execution for model checking and testing. Tools and Algorithms for the Construction and Analysis of Systems, pages 553-568, 2003.
16. J.C. King. Symbolic execution and program testing. Communications of the ACM, 19(7):385-394, 1976.
17. DR Licata and S. Krishnamurthi. Verifying interactive web programs. In Automated Software Engineering, 2004. Proceedings. 19th International Conference on, pages 164-173. IEEE.
18. Jaideep Nijjar and Tevfik Bultan. Bounded verification of ruby on rails data models. In Matthew B. Dwyer and Frank Tip, editors, ISSTA, pages 67-77. ACM, 2011.
19. Filippo Ricca and Paolo Tonella. Analysis and testing of web applications. In Hausi A. Müller, Mary Jean Harrold, and Wilhelm Schäfer, editors, ICSE, pages 25-34. IEEE Computer Society, 2001.
20. J. Syriani and N. Mansour. Modeling web systems using sdl. Computer and Information Sciences-ISCIS 2003, pages 1019-1026, 2003.
21. Nikolai Tillmann and Wolfram Schulte. Parameterized unit tests. SIGSOFT Softw. Eng. Notes, 30(5):253-262, September 2005.
22. P. Tonella and F. Ricca. Dynamic model extraction and statistical analysis of web applications. 2002.
23. E. Torlak and D. Jackson. Kodkod: A relational model finder. Tools and Algorithms for the Construction and Analysis of Systems, pages 632-647, 2007.
24. M. Winckler and P. Palanque. Statewebcharts: A formal description technique dedicated to navigation modelling of web applications. Interactive Systems. Design, Specification, and Verification, pages 279-288, 2003.